skills.rest
YukiIto1999
YukiIto1999COMMUNITY
Explore all skills by this author →
GitHub

cve-risk-score

Fetch CVSS scores and risk context for CVE IDs from NVD.

Updated Apr 23, 2026
Search Tags:#vulnerability#triage#risk#cvss#cve#lookup#nvd
One-click install
npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill cve-risk-score
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cve-risk-score
Source: https://github.com/YukiIto1999/ctf-sleuth/tree/main/.claude/skills/cve-risk-score
Command: npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill cve-risk-score

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

CVE risk assessment is automated by fetching CVE scores from the National Vulnerability Database (NVD) and presenting concise risk context to aid triage.

Core Features & Use Cases

  • Auto-detect CVE IDs in chat or logs and fetch their CVSS scores, severities, CWE references, and descriptions.
  • Present results in a concise table or inline format to accelerate vulnerability prioritization.
  • Useful for security teams performing rapid triage during incident response, vulnerability management, or red-team assessments.

Quick Start

Provide a CVE ID and request its risk score from NVD using the lookup tool.

Frequently Asked Questions about cve-risk-score

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I look up CVE risk scores from NVD automatically?▼

To look up CVE risk scores from NVD, provide a CVE ID and the Skill fetches CVSS scores, severities, CWE references, and descriptions to accelerate vulnerability prioritization.

What is the best way to automate CVE triage during incident response?▼

Automating CVE triage during incident response involves fetching CVSS scores and descriptions from NVD, then presenting the vulnerability risk context in a concise table or inline format for rapid prioritization.

Do I need an NVD API key to fetch CVSS scores?▼

An NVD API key is not strictly required but is recommended. The Skill reads NVD_API_KEY from the environment to enable higher rate limits when fetching CVSS vulnerability scores.

Can I extract CVE IDs directly from logs to check vulnerability risk?▼

Yes, the Skill auto-detects CVE IDs mentioned in chat or logs and fetches their CVSS scores, severities, and descriptions from NVD to contextualize the vulnerability risk.

What limitations exist when using NVD lookup for vulnerability management?▼

The NVD lookup requires the nvd-lookup.py script to function. Without an NVD_API_KEY environment variable configured, you may face lower rate limits when fetching CVE risk scores.

Related Skills

Explore More Data & Analytics Skills→
LeoWSY-hashblueLeoWSY-hashblue
3

cve-risk-score

Fetch CVE risk scores from the National Vulnerability Database when CVE IDs are detected.

Community
Intermediate
blamejsblamejs

exploit-scoring

Calculate RWEP priority scores for CVEs using exploit availability and threat patterns.

Official
Advanced
infantesromeroadrianinfantesromeroadrian

transilience-cve-risk-score

Extract CVE risk scores from NVD using regex and API calls.

Community
Intermediate
Nir-BhayNir-Bhay
19

cve-tracking-system

Track CVEs with NVD data and CVSS scoring for patch prioritization.

Community
Advanced